Elastic defense system and method for generalized end node of information network

The invention discloses an elastic defense system and method for generalized end nodes of an information network, and belongs to the field of network security. In order to solve the problems of high end node protection cost, poor expandability and high false alarm rate in the information network, end node protection equipment is installed and deployed in a physical layer in an ISO mode, when the protection scene and scale of the information network are determined, the physical layer determines required related performance configuration according to a model in which resource configuration and function modules are mutually adapted, and the information network is protected. And determining an interface technology for communication of the data acquisition and monitoring module, the distributed control module, the programmable logic control module and each component. In the aspect of an application layer, the defense system adopts an open system architecture and a modular design, a user-oriented security protectio